CVE-2020-17087 is a vulnerability in the Windows Kernel Cryptography Driver, and “constitutes a locally accessible attack surface that can be exploited for privilege escalation (such as sandbox escape).”

The attackers are using Chrome bug CVE-2020-15999, patched on October 20, to gain access to the target system and then the new Windows CVE-2020-17087 to gain administrator access on the target PC.

A patch for the Windows issue is expected to be released on November 10, as part of the monthly Patch Tuesday effort by Microsoft.

Read more... and keep your updates current...